I'm not a lawyer, but I presume Sweden has laws governing patient privacy. Even if not, Sweden certainly has the GDPR.